QUESTION: 117

Which of the following is the MOST efficient way to assess the controls in a service provider's environment?

Review testing performed by the service provider's internal audit department.
Require the service provider to conduct control self-assessments (CSAs).
Review the service provider's master service agreement (MSA).
Obtain an independent auditor's report from the service provider.

Answer(s): D

Reveal Solution Next Question

QUESTION: 118

The PRIMARY focus of audit follow-up reports should be to:

assess if new risks have developed.
determine if audit recommendations have been implemented.
determine if past findings are still relevant.
verify the completion date of the implementation.

Answer(s): B

Reveal Solution Next Question

QUESTION: 119

Which of the following is the BEST way to mitigate the risk associated with technology obsolescence?

Create tactical and strategic IS plans.
Make provisions in the budgets for potential upgrades.
Invest in current technology.
Create a technology watch team that evaluates emerging trends.

Answer(s): A

Reveal Solution Next Question

QUESTION: 120

Which of the following is MOST important to ensure when reviewing a global organization's controls to protect data held on its IT infrastructure across all of its locations?

The capacity of underlying communications infrastructure in the host locations is sufficient.
The threat of natural disasters in each location hosting infrastructure has been accounted for.
Relevant data protection legislation and regulations for each location are adhered to.
Technical capabilities exist in each location to manage the data and recovery operations.

Answer(s): C

Reveal Solution Next Question

Free CISA Exam Braindumps (page: 31)

QUESTION: 117

QUESTION: 118

QUESTION: 119

QUESTION: 120

CISA Exam Discussions & Posts